UCSC A.I CyberSecurity Scoring
02/04/2026
Access Monitoring Plan
Access Monitoring Plan
No incidents recorded for University of California, Santa Cruz in 2026.
No incidents recorded for University of California, Santa Cruz in 2026.
No incidents recorded for University of California, Santa Cruz in 2026.
Texas A&M University has a proud history that stretches back to 1876 when The Agricultural and Mechanical College of Texas became the first public institution of higher learning in the state of Texas. Nestled in the heart of the Houston-Dallas-Austin triangle, Texas A&M University at College Station is the state's largest university, with nearly 77,000 students calling Aggieland home, and another 5,200 Aggies are studying at branch campuses in Galveston, Texas, and Doha, Qatar. Texas A&M's designation as a land-, sea-, and space-grant institution reflects the superior quality and diverse range of research and innovation occurring on campus daily. Texas A&M boasts a strong military tradition, having contributed men and women in uniform to every armed conflict since the Spanish-American War. More Aggies commission as officers into the U.S. Armed Forces than any other school outside of the U.S. military academies every year. Student-athletes represent Texas A&M across 18 sports within the Southeastern Conference. Additionally, the George H.W. Bush Presidential Library and Museum is located on Texas A&M's campus, as is the President and First Lady’s final resting places. Quick to offer a cheery "Howdy!" to any visitor, Aggies pride themselves on their hospitality and strive to live out the University's core values of respect, excellence, leadership, loyalty, integrity, and selfless service. To learn more about employment opportunities at Texas A&M, visit https://jobs.tamu.edu/.
Washington University in St. Louis, a medium-sized, independent university, is dedicated to challenging its faculty and students alike to seek new knowledge and greater understanding of an ever-changing, multicultural world. The university has played an integral role in the history and continuing growth of St. Louis and benefits in turn from the wide array of social, cultural and recreational opportunities offered by the metropolitan area to its more than 2.8 million residents. The mission of Washington University in St. Louis is the promotion of learning — learning by students and by faculty. Teaching, the transmission of knowledge, is central to our mission, as is research, the creation of new knowledge.
The University of Alberta is one of Canada’s top teaching and research universities, with an international reputation for excellence across the humanities, sciences, creative arts, business, engineering, and health sciences. Home to more than 39,000 students and 15,000 faculty and staff, the university has an annual budget of $1.7 billion and attracts nearly $450 million in sponsored research revenue. The U of A offers close to 400 rigorous undergraduate, graduate, and professional programs in 18 faculties on five campuses. The university has more than 250,000 alumni worldwide. The university and its people remain dedicated to the promise made in 1908 by founding president Henry Marshall Tory that knowledge shall be used for “uplifting the whole people."
The University of Arkansas is Arkansas' only R1 research institution and is the flagship land-grant campus of the U of A System. We provide an internationally competitive education for undergraduate and graduate students in more than 200 academic programs and contribute more than $2.2 billion in economic impact to the state of Arkansas. The Carnegie Foundation classifies the U of A among the top 3 percent of colleges and universities in America with the highest level of research activity. U.S. News & World Report ranks the University of Arkansas among its top American public research universities. Founded in 1871, the University of Arkansas comprises 10 colleges and schools and maintains a low student-to-faculty ratio that promotes personal attention and close mentoring to provide all students with life-changing opportunities. The U of A is dedicated to Arkansas and works to build a better world.
University of Tehran, an iconic institution of higher education in Iran, traces its origins back seven centuries to its foundation as a houza (traditional religious school). Over time, it evolved from this religious structure into a modern academic institution. About a century ago, the Dar-ol-Fonoon College became the first engineering school in its modern form, marking a significant step in Iran's higher education landscape. The University of Tehran, as it is known today, was officially inaugurated in the winter of 1934. Currently, the University of Tehran offers 976 programs across 500 fields within 39 faculties and 120 departments located on campuses in Tehran, Qom, Karaj, Kish, and Jolfa. The university is supported by a distinguished faculty of over 2,000 tenured members. Approximately 15% of Iran’s Centers of Excellence, as recognized by the Ministry of Science, Research, and Technology, are affiliated with the University of Tehran. UT’s dedication to research is reflected in its more than 40 research centers, 3,500 laboratories, and its leading press, which publishes over 50 peer-reviewed scientific journals. For more details on the University of Tehran’s colleges and faculties, please visit: https://ut.ac.ir/en/page/9786/colleges-faculties-international-campuses
Cornell is a privately endowed research university and a partner of the State University of New York. As the federal land-grant institution in New York State, we have a responsibility—unique within the Ivy League—to make contributions in all fields of knowledge in a manner that prioritizes public engagement to help improve the quality of life in our state, the nation, the world.
Founded in 1831, NYU is one of the world’s foremost research universities and is a member of the selective Association of American Universities. The first Global Network University, NYU has degree-granting university campuses in New York and Abu Dhabi, and has announced a third in Shanghai; has a dozen other global academic sites, including London, Paris, Florence, Tel Aviv, Buenos Aires, and Accra; and sends more students to study abroad than any other U.S. college or university. Through its numerous schools and colleges, NYU conducts research and provides education in the arts and sciences, law, medicine, business, dentistry, education, nursing, the cinematic and performing arts, music and studio arts, public administration, social work, and continuing and professional studies, among other areas.
Deakin’s unique identity – rooted in balanced excellence in education and research – has been driving lasting change for a better future since 1974. Over our 50+ year history, Deakin has grown to be one of the top universities worldwide with a truly global presence. Our passion and commitment to teaching, research and student success is recognised by local and international ranking bodies and our students. Turning 50 is a key milestone for the Deakin community. We’re transitioning from a young University to a more established institution that’s turning ideas into impact. #1 Victorian uni for graduate employment, Course Satisfaction & Student Support #2 Victorian uni for research quality Registered Australian University CRICOS No: 00113B
The California State University is the largest system of four-year higher education in the country, with 22 campuses, 56,000 faculty and staff and more than 450,000 students. Created in 1960, the mission of the CSU is to provide high-quality, affordable education to meet the ever-changing needs of California. With its commitment to quality, opportunity, and student success, the CSU is renowned for superb teaching, innovative research and for producing job-ready graduates. The CSU powers California and the nation, sending nearly 127,000 career-ready graduates into the workforce each year. In fact, one in every 20 Americans holding a college degree earned it at the CSU and our alumni are 4 million strong.
Latest updates, reports, and threat intel affecting the global network.
A sophisticated threat actor has been conducting a persistent phishing campaign against United States educational institutions since April...
The University of California, Santa Cruz has been named one of the nation's leading centers for cybersecurity research.
The University of California, Santa Cruz, has been named a National Center of Academic Excellence in Cyber Research (CAE-R) by the U.S....
The City of San José is excited to invite you to the second annual Cybersecurity Awareness Day event on October 16, 2024, in the City Hall Rotunda.
Workplace security training is a must – but blame culture helps no one.
The Georgia Institute of Technology last week announced it's named Joseph “Joe” Lewis as its new chief information security officer and vice...
In August 2024, TraCR issued a Call for Proposals to researchers at our eight partner institutions, launching the 2024-2025 round of funded projects.
Steve Morgan, Editor-in-Chief. Sausalito, Calif. – Mar. 6, 2025. Cybercrime Magazine is excited to bring our readers a list of women-owned...
Students will get back a fraction of the $10000 tuition they paid for a program that played up Caltech's name but was run entirely by a...
A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41.0.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the djust live transport resolves the LiveView to mount from a client-supplied dotted path by calling `__import__(module_path, ...)`. The module is imported — running its top-level code (import side effects) — before the framework checks that the resolved object is a `LiveView` subclass and before any per-view authentication. The `LIVEVIEW_ALLOWED_MODULES` allowlist that should contain this is fail-open (`if allowed_modules:` — skipped when the setting is unset, the framework default) and uses loose `startswith` matching. An unauthenticated WebSocket client (the WS handshake does not require auth; per-view auth runs only after import + instantiate) can therefore send a `mount` / `live_redirect_mount` / `url_change` frame (or an SSE mount) with `view = "<any.importable.module>.AnyName"` and cause the server to import — and execute the top-level code of — any importable Python module by name. Version 1.0.7 fixes the issue with a fail-closed resolution gate (`djust._view_resolution.is_view_import_allowed`): a client view path resolves only if (a) its module is already loaded (`sys.modules` — so resolving runs no new code; URL-routed views loaded by URLconf at startup keep working with zero config) or (b) it matches `LIVEVIEW_ALLOWED_MODULES` on a module-segment boundary (explicit opt-in for lazily-imported views). The gate runs before `__import__` at all three sinks (+ defense-in-depth inside `_instantiate_view`). As a workaround, set `LIVEVIEW_ALLOWED_MODULES` to the narrow list of modules that contain your mountable LiveView classes. (Note: pre-patch the allowlist is `startswith`-matched and the import still precedes the subclass check, so this is mitigation, not a complete fix.)
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, djust's per-object authorization (`get_object` + `has_object_permission`, ADR-017) was enforced on the WebSocket mount and event paths but not on three other render entry points: (a) the initial HTTP GET render, (b) SPA `url_change` navigation, and (c) `{% live_render %}` embedded child views. An authenticated user could therefore view (and on some paths act on) an object they are not authorized for by loading the page directly, navigating to it via SPA url-change, or composing it as an embedded child — a classic IDOR / broken object-level access control on object-scoped views. This is fixed in djust 1.0.7. All render entry points now route through a shared `enforce_object_permission` chokepoint: HTTP GET returns 403, `url_change` emits a `permission_denied` frame and skips the render, and `{% live_render %}` (eager + lazy) refuses the embed. Views without a custom `get_object` are unaffected (no-op). No reliable workaround short of upgrading. Do not expose object-scoped views through the HTTP-GET / url_change / live_render paths until patched.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, the WebSocket `handle_mount` and `ViewRuntime._build_request` rebuild an `HttpRequest` via `RequestFactory().get(...)` with no `HTTP_HOST`, so `request.get_host()` defaulted to `"testserver"` on the live path. Host/subdomain/domain `TenantResolver`s then misresolved the tenant — `None` on the live path while the HTTP path resolved correctly. With `STRICT_MODE=False` the tenant-scoped managers returned unscoped rows (cross-tenant disclosure); with the default they returned an empty queryset (broken tenancy). This is fixed in djust 1.0.7. The handshake Host is extracted from the ASGI scope, validated against `ALLOWED_HOSTS` (the same logic as the CSWSH Origin gate, parsed with Django's `split_domain_port` so malformed Hosts are rejected at the boundary), and propagated — with the TLS scheme — into the reconstructed request, so live-path tenant resolution matches HTTP exactly. There is no known workaround on the live path short of upgrading. Users are most exposed when combined with `STRICT_MODE=False`.
djust provides Phoenix LiveView-style reactive server-side rendering for Django with Rust-powered performance. Prior to version 1.0.7, when a Django `Model` instance is assigned to a public view attribute, djust serialized it to the client with no sensitive-field denylist — sending fields such as `password` (the hash), privilege flags (e.g. `is_staff` / `is_superuser`), tokens, and other PII to the browser. Because exposing model objects to templates is a normal djust pattern, this could leak credentials/PII without the developer realizing the full object crossed the wire. This is fixed in djust 1.0.7. Model serialization applies a secure-by-default sensitive-field denylist (password/hash/token/secret-style fields and known privilege flags are withheld) with an identity-subset fallback. As a workaround, keep `Model` instances on `_private` attributes and expose only the specific fields needed, until patched.
curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'
Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.
Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.